IAM-11—Temporary Account Termination

>Control Description

Temporary and emergency accounts are automatically terminated 90 days from the date they are generated.

Theme

Technology

Type

Preventive

Policy/Standard

Access Management Procedure

>Implementation Guidance

1. Design and document a process for Access control and requirements for automatic termination of temporary and emergency accounts. 2. Ensure that the access management portal is configured to terminate temporary and emergency accounts within 90 days.

>Testing Procedure

1. Inspect Organization's access control policy to check policy pertaining to temporary and emergency accounts are automatically terminated 90 days from the date they are generated, is clearly defined. 2. Check the access management tool to ensure the effectiveness of termination of temporary and emergency accounts within 90 days..